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DETAILED ACTION 

1 . This action is responsive to tine communication filed on February 18, 2009. 
Claims 1-33 are pending. At this time, claims 1-33 are still rejected. 

Response to Arguments 

2. Applicant's arguments filed February 18, 2009 have been fully considered 
but they are not persuasive. However, upon further consideration, a new ground(s) of 
rejection is made in view of McCulligh (US 6,643,784 B1). Therefore, the previous 
rejection has been withdrawn. 

The fact that Examiner may not have specifically responded to any 
particular arguments made by Applicant and Applicant's Representative, should not be 
construed as indicating Examiner's agreement therewith. 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
Invention was made to a person having ordinary skill In the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner In which the Invention was made. 

4. Claim 1-7, 10-16, and 19-33 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Schneider(US 2004/0250138 A1), and further in view of McCulligh 
(US 6,643,784 B1). 

a. Referring to claim 1: 

i. Schneider teaches a method for generating a password for a 
user (paragraph [0020-0021] of Schneider), comprising: 

(1) presenting said user with a plurality of hints (Figures 
2-4 show the plurality of hints, such as an image of a tree 201, a person 202, a 
beachball 203 and a car 204, and paragraph [0021] of Schneider); 

(2) receiving a user selection of one of said hints; 
automatically generating a password based on said selected hint (Figures 2-4 and 
paragraph [0021-0022] of Schneider, wherein user creates password based on 
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images, such as tree or beachball shown in Figure 2 or a sandwich, a banana, an 
apple, and a softdrink as shown in Figure 4, the password will be automatically 
genenerated after user finished selecting the images for their password); and 

(3) presenting said selected hint to said user to reinforce 
said generated password (Figures 2-4 and paragraph [0021-0022] of Schneider, 
wherein the selection of the beachball, picnic basket and sandwich in Figures 2-4 
would represent the user's password). 

ii. Although Schneider teaches a method for generating a 
password for a user (paragraph [0020-0021] of Schneider), Schneider is not clearly 
shown that the password gets generated automatically based on selected hint or image. 
Schneider does imply the password will create based on user's selected image (see 
paragraph [0021-0022]). On the other hand, McCulligh teaches automatically generate 
the acceptance password change data when there have been enough characters 
entered or, for example, where all characters that have been entered conform to the 
configured rule data (column 4, lines 48-56 of McCulligh). 

ill. It would have been obvious to a person having ordinary skill 
in the art at the time the invention was made to: 

(1) have modified the invention of Schneider with the 
teaching of McCulligh (if indeed is not inherent in Schneider) for facilitating initial entry 
during password selection and generation that employ feedback as to whether or not a 
password has been properly initially entered or generated (column 1, lines 9-11 of 
McCulligh). 

iv. The ordinary skilled person would have been motivated to: 

(1) have modified the invention of Schneider with the 
teaching of McCulligh (if indeed is not inherent in Schneider) to overcomes the problem 
of the difficulty of memorizing many different passwords (last sentence, paragraph 
[0007] of Schneider). 

b. Referring to claim 2: 

i. Schneider further teaches: 
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(1) wherein said plurality of hints include one or more of 
textual, audio or visual hints (Figures 2-4, such as beachball, picnic basinet and 
sandwich of Schneider). 

c. Referring to claim 3: 

i. Schneider further teaches: 

(1) wherein said plurality of hints include one or more of 
poems, songs, jokes, pictures or words (Figures 2-4, such as beachball, picnic 
basket and sandwich of Schneider). 

d. Referring to claim 4: 

\. Schneider further teaches: 

(1) wherein said generated password is further based on 
a user input (Figures 2-4 and paragraph [0021-0022] of Schneider, wherein user 
creates password based on images, such as tree or beachball shown in Figure 2 
or a sandwich, a banana, an apple, and a softdrink as shown in Figure 4, the 
password will be automatically genenerated after user finished selecting the 
images for their password. 

e. Referring to claim 5: 

\. Schneider further teaches: 

(1) further comprising the step of presenting said 
selected hint and said generated password to said user at enrollment (Figures 2-4 and 
paragraph [0021-0022] of Schneider, wherein within an ATM, the first time a user 
uses the system, he/she must set a password, wherein the selection of the 
beachball, picnic basket and sandwich in Figures 2-4 would represent the user's 
password). 

f. Referring to claim 6: 

i. Schneider further teaches: 

(1) further comprising the step of sending said selected 
hint to said user as a reinforcement of said generated password (Figures 2-4 and 
paragraph [0021-0022] of Schneider, wherein the selection of the beachball, 
picnic basket and sandwich in Figures 2-4 would represent the user's password). 
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g. Referring to claim 7: 

i. Schneider further teaches: 

(1) further comprising the step of recording said selected 
hint and said generated password in a record associated with said user (paragraph 
[0022] of Schneider, wherein Figure 1 shows the values in the Scene Registers 
103, 104 and 105 would then be passed via an Interface Box 106 to a computer 
system at the bank so that the bank's computer system could now store this 
password for this user). 

h. Referring to claims 13-16. 23-25: 

1. These claims have limitations that are similar to those of 
claims 2-3, thus they are rejected with the same rationale applied against claims 2-3 
above. 

i. Referring to claim 19: 

i. This claim has limitation that is similar to those of claim 1, 
thus they are rejected with the same rationale applied against claim 1 above, 
j. Referring to claim 26: 

i. Schneider further teaches: 

(1) wherein said user is queried about a resulting visual 
image from said selected subset of said image icons to obtain access to a protected 
resource (Figures 2-4, such as beachball, picnic basket and sandwich, and 
paragraph [0020] of Schneider). 

k. Referring to claim 27: 

\. This claim consist a apparatus for generating a password for 
a user to implement claim 1, thus it is rejected with the same rationale applied against 
claim 1 above. 

ii. Schneider further teaches: 

(1) a memory; and at least one processor, coupled to the 
memory [I.e., Figure 1, elements 102 and 107]. 

I. Referring to claims 28-29: 
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i. These claims liave limitations that is similar to those of claim 
2, thus they are rejected with the same rationale applied against claim 2 above, 
m. Referring to claim 30: 

i. This claim has limitations that is similar to those of claim 4, 
thus it is rejected with the same rationale applied against claim 4 above, 
n. Referring to claim 31: 

i. This claim has limitations that is similar to those of claim 5, 
thus it is rejected with the same rationale applied against claim 5 above, 
o. Referring to claim 32: 

\. This claim has limitations that is similar to those of claim 6, 
thus it is rejected with the same rationale applied against claim 6 above, 
p. Referring to claim 33: 

1. This claim has limitations that is similar to those of claim 7, 
thus it is rejected with the same rationale applied against claim 7 above, 
q. Referring to claim 10: 

i. Although Schneider teaches a method for generating a 
password for a user using hint system (paragraph [0020-0021] of Schneider), Schneider 
is silent (if indeed is not inherent) on the capability of using hints as a plurality of words. 
On the other hand, McCulligh teaches: 

(1) wherein said plurality of hints includes a plurality of 
words and said generated password is based on a subset of said words selected by 
said user (column 7, lines 23-33 of McCulligh). 

ii. It would have been obvious to a person having ordinary skill 
in the art at the time the invention was made to: 

(1) have modified the invention of Schneider with the 
teaching of McCulligh (if indeed is not inherent in Schneider) for facilitating initial entry 
during password selection and generation that employ feedback as to whether or not a 
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password has been properly initially entered or generated (column 1, lines 9-11 of 
McCulligh). 

ill. The ordinary skilled person would have been motivated to: 

(1) have modified the invention of Schneider with the 
teaching of McCulligh (if indeed is not inherent in Schneider) to overcomes the problem 
of the difficulty of memorizing many different passwords (last sentence, paragraph 
[00071 of Schneider). 

r. Referring to claim 11: 

i. This claim has limitation that is similar to those of 
claims 2-3, thus they are rejected with the same rationale applied against claims 2-3 
above. 

s. Referring to claims 12. 20-22: 

i. These claims have limitations that are similar to those 
of claim 10, thus they are rejected with the same rationale applied against claim 10 
above. 

5. Claims 8-9, and 17-18 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Schneider (US 2004/0250138 A1), and further in view of Serpa (US 
6,954862 B2). 

a. Referring to claim 8: 

i. Although Schneider teaches a method for generating a 
password for a user using hint system (paragraph [0020-0021] of Schneider), Schneider 
is silent (if indeed is not inherent) on the capability wherein said selected hint is a poem, 
which could have been included in Figures 2-4 of Schneider, and said generated 
password has a similar rhyme and meter as said selected poem. On the other hand, 
Serpa teaches: 

(1) The pace, rhythm, or tempo of keystrokes becomes 
as much a part of the password as the actual letters, numbers, or symbols comprising 
the password. An unauthorized individual might still obtain the ID and password 
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belonging to a legitimate user but, without knowledge of the correct timing element 
associated with the password, the information will be useless. Because the password is 
pace, rhythm, or tempo sensitive, access is restricted to those who know both the 
password and the pace, rhythm, or tempo of the password (column 4, lines 40-49 of 
Serpa). 

ii. It would have been obvious to a person having ordinary skill 
in the art at the time the invention was made to: 

(1) have modified the invention of Schneider with the 
teaching of Serpa (if indeed is not inherent in Schneider) to increase the security 
afforded by passwords and to make them easier to use (column 2, lines 24-26 of 
Serpa). 

iii. The ordinary skilled person would have been motivated to: 

(1) have modified the invention of Schneider with the 
teaching of Serpa (if indeed is not inherent in Schneider) to overcomes the problem of 
the difficulty of memorizing many different passwords (last sentence, paragraph 
[0007] of Schneider). 

b. Referring to claim 9: 

i. Although Schneider teaches a method for generating a 
password for a user using hint system (paragraph [0020-0021] of Schneider), Schneider 
is silent (if indeed is not inherent) on the capability wherein said plurality of hints 
includes a plurality of jokes, which could have been included in Figures 2-4 of 
Schneider, each containing one of a number of different variations for one or more 
variable words or phrases included in each joke and said generated password includes 
said variations for said one or more variable words or phrases. On the other hand, 
Serpa teaches: 

(1) The pace, rhythm, or tempo of keystrokes becomes 
as much a part of the password as the actual letters, numbers, or symbols comprising 
the password. An unauthorized individual might still obtain the ID and password 
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belonging to a legitimate user but, without knowledge of the correct timing element 
associated with the password, the information will be useless. Because the password is 
pace, rhythm, or tempo sensitive, access is restricted to those who know both the 
password and the pace, rhythm, or tempo of the password (column 4, lines 40-49 of 
Serpa). 

ii. It would have been obvious to a person having ordinary skill 
in the art at the time the invention was made to: 

(1) have modified the invention of Schneider with the 
teaching of Serpa (if indeed is not inherent in Moy) to increase the security afforded by 
passwords and to make them easier to use (column 2, lines 24-26 of Serpa). 

ill. The ordinary skilled person would have been motivated to: 

(1) have modified the invention of Schneider with the 
teaching of Serpa (if indeed is not inherent in Schneider) to overcomes the problem of 
the difficulty of memorizing many different passwords (last sentence, paragraph 
[0007] of Schneider). 

c. Referring to claims 17-18: 

i. These claims have limitations that Is similar to those of 
claims 1 and 8-9, thus they are rejected with the same rationale applied against claims 
1 and 8-9 above. 

Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Thanhnga (Tanya) Truong whose telephone number 

is 571-272-3858. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached at 571-272-3859. The fax and phone 
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numbers for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Any inquiry of a general nature or relating to the status of this 
application or proceeding should be directed to the receptionist whose telephone 
number is 571-272-2100. 

/Thanhnga B. Truong/ 
Examiner, Art Unit 2438 
June 04, 2009 



